Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.mft
File:                     gHcJ57DvuhJwJcg-XTGUxxukKMM.mft (raw, json)
Hash identifier:          2+C9w5z8CxPUNoFwd4Xq9DsSA/8e7oP66toaNsEmZyc=
Subject key identifier:   AA:C6:90:D8:76:9D:B2:AC:AB:30:C3:EA:61:99:A5:40:E5:0C:86:8C
Authority key identifier: 80:77:09:E7:B0:EF:BA:12:70:25:C8:3E:5D:31:94:C7:1B:A4:28:C3
Certificate issuer:       /CN=807709e7b0efba127025c83e5d3194c71ba428c3
Certificate serial:       019F83E7B7643666DA6058D5B6905B6F1542
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gHcJ57DvuhJwJcg-XTGUxxukKMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.mft
Manifest number:          19C7
Signing time:             Tue 21 Jul 2026 09:00:28 +0000
Manifest this update:     Tue 21 Jul 2026 09:00:28 +0000
Manifest next update:     Wed 22 Jul 2026 09:00:28 +0000
Files and hashes:         1: 17V0jzStQoCb_AQ6tvGaBLavGoM.roa (hash: xin2ArbEF/v8y8IFPHvAh0sLnYeJkUxdnoEAhdH3Knc=)
                          2: P3hxeobOBa_A0xJ0xlGfKnSdNVU.roa (hash: mHchc2zREYZlnOuz8p+co3qUvhS0H4UpE0PWUACDroc=)
                          3: fn22VffPk13JEZ43P7QzWAHfKUI.roa (hash: jLIrzazW1c/8A69YDLVF5OeAhGmqg599WqHWOZ8LrQc=)
                          4: gHcJ57DvuhJwJcg-XTGUxxukKMM.crl (hash: dL9vKeAh4OdkXrfu6vlZ8mOi1/Eu54/ag1tqIZ/YigQ=)
                          5: lvjXs-MIPCkpvks5PHkIN5Ickrg.roa (hash: rbC/bc1gnAJSprju+NYQ5fdLrBRf1LuhW2461H5788Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gHcJ57DvuhJwJcg-XTGUxxukKMM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 09:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:83:e7:b7:64:36:66:da:60:58:d5:b6:90:5b:6f:15:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=807709e7b0efba127025c83e5d3194c71ba428c3
        Validity
            Not Before: Jul 21 09:00:28 2026 GMT
            Not After : Jul 22 09:00:28 2026 GMT
        Subject: CN=aac690d8769db2acab30c3ea6199a540e50c868c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:86:0a:fe:e2:39:0e:1b:60:87:61:50:96:f0:
                    d5:8e:6e:95:7b:78:93:26:c2:58:67:d8:0e:c5:75:
                    7f:15:d0:71:24:96:d4:fd:c5:ac:53:13:c0:e2:c2:
                    e4:fe:75:8b:50:0d:1c:db:fe:64:78:ff:36:96:4b:
                    77:7d:38:59:9b:0d:3d:0e:95:3f:8c:22:08:76:e4:
                    76:75:e7:31:ea:7e:df:68:7d:54:45:55:c1:3b:33:
                    a2:02:87:ff:91:f2:9d:58:a9:a8:16:50:46:ef:ad:
                    84:bb:66:4d:94:46:7c:f1:31:3d:2e:56:3f:df:73:
                    c4:4c:69:cd:84:09:d3:aa:aa:08:59:d0:d3:a4:f4:
                    6d:c6:dc:1a:ea:73:bb:7f:b0:f2:33:3c:e2:5a:9e:
                    08:0c:d3:83:4c:8b:ad:05:0f:a5:fd:1c:f0:5f:eb:
                    37:5a:99:50:bd:15:31:a1:e0:b5:fc:c8:c0:9c:a7:
                    9e:bc:22:8b:a6:12:4c:58:d3:a0:b2:d1:0a:f9:b8:
                    94:d8:ff:71:52:10:a1:13:63:a7:39:24:31:95:fa:
                    15:10:05:62:ef:e4:3f:1d:b7:17:61:02:25:6f:22:
                    bb:13:87:8f:6b:37:18:f2:79:c5:72:1a:45:fa:b4:
                    1c:be:df:4a:89:6d:6a:c4:cc:f2:6c:b5:e8:ad:b3:
                    c6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:C6:90:D8:76:9D:B2:AC:AB:30:C3:EA:61:99:A5:40:E5:0C:86:8C
            X509v3 Authority Key Identifier:
                keyid:80:77:09:E7:B0:EF:BA:12:70:25:C8:3E:5D:31:94:C7:1B:A4:28:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHcJ57DvuhJwJcg-XTGUxxukKMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:36:21:55:35:4c:3e:97:e6:3b:55:11:43:15:92:1a:fb:85:
         3d:83:ec:04:48:f2:60:8f:2e:bd:08:f6:74:ef:a1:21:86:d1:
         b5:75:2e:a0:5e:a1:a0:a7:eb:f1:4f:2c:19:18:b2:5e:e9:f8:
         32:e4:e9:f9:4c:45:b1:14:65:0d:44:f3:5c:a2:76:bc:fc:70:
         ca:79:1a:9a:06:c4:09:bc:dc:0e:80:b9:ea:ec:52:7c:15:3f:
         99:4c:1f:68:3c:54:cd:30:d6:e1:27:84:b4:c2:ad:d5:85:35:
         3a:63:af:0d:6a:76:2c:08:3a:ff:e1:22:fa:36:13:e0:e5:c6:
         5c:42:08:82:ab:b3:aa:a7:7f:19:f4:d9:6c:20:2f:b5:f2:08:
         a6:bc:33:1a:a9:df:87:e1:ef:9e:d9:33:26:40:a9:47:33:1a:
         23:15:b8:75:1d:d0:8d:0b:9b:7c:f1:77:86:a6:8b:0f:ad:ea:
         63:f6:ec:c1:43:a3:0b:1d:c0:ec:d2:28:63:9f:1e:98:9d:58:
         5b:cb:45:4a:e7:63:20:31:d2:26:3d:eb:9c:5c:96:d8:90:c4:
         16:72:fb:91:84:fe:7d:4a:4a:a0:f6:0d:f1:42:a4:93:9d:0b:
         20:09:81:17:df:e2:ee:92:a8:f4:a6:38:25:a9:02:f8:85:9b:
         72:ad:4c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:25:30 2026 by rpki-client